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THE EMBODIMENTS OF THE INVENTION IN WHICH AN EXCLUSIVE 
PROPERTY OR PRIVILEGE IS CLAIMED ARE DEFINED AS FOLLOWS: 

1 . A method of providing a point multiple in an elliptic curve cryptosystem, said point 
5 multiple being derived from a scalar and a point on an elliptic curve having an equation 

of the form y 1 + xy = x* + a { x 2 + 1 , where a\ is either 0 or 1, said method comprising the 
steps of: 

a) obtaining a pair of coefficients derived from a truncator of said elliptic curve; 

b) computing a representation of said scalar from said pair of coefficients, said 
10 scalar, and said truncator of said elliptic curve; 

\Z c) computing said point multiple using said representation of said scalar and a 

0 Frobenius mapping r .; 

!jj d) providing said point multiple to said elliptic curve cryptosystem. 

ru 

1 J* 2. A method according to claim 1 , wherein said pair of coefficients corresponds to an 
% % approximation of the inverse of said truncator. 

yg 3, A method according to claim 2, wherein said approximation is determined by a 
Si significance parameter. 



20 



4. A method according to claim t, wherein said representation of said scalar is equivalent to 
said scalar modulo said truncator. 



5. A method according to claim 2, further comprising the step of computing a quotient 

25 derived from said pair of coefficients and said scalar and using said quotient to perform 

the step of computing said representation of said scalar. 

6. A method according to claim 5, wherein said quotient is equivalent to a product of said 
scalar and said approximation of said inverse of said truncator. 
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1. A method according to claim 6, wherein said representation of said scalar is equivalent to 
a remainder after division of said scalar by said truncator. 

8. A method according to claim 1 , wherein said truncator is - - 

5 9, A method of computing a key derived from a scalar and a point on an elliptic curve 
having an equation of the form y 2 + xy « x 3 + a,* 2 + 1 , where ai is either 0 or 1, said 
method comprising the steps of; 

a) obtaining a pair of coefficients derived from a truncator of said elliptic curve; 

b) computing a representation of said scalar from said pair of coefficients, said 
lS scalar, and said truncator of said elliptic curve; 

c) computing said point multiple using said representation of said scalar and a 
01 Frobenius mapping r . 

■P 10. In a method of computing an elliptic curve digital signature requiring a point multiple, 
l|3l the improvement comprising computing said point multiple by the steps of: 

rj a) obtaining a pair of coefficients derived from a truncator of said elliptic curve; 

y 3 b) computing a representation of said scalar from said pair of coefficients, said 

n ] scalar, and said truncator of said elliptic curve; 

c) computing said point multiple using said representation of said scalar and said 
20 endomorphism of said elliptic curve. 

1 1 - A data carrier containing computer executable instructions for performing a method 
according to claim 1. 

12. A cryptographic system performing a method according to claim 1 . 
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